Where in the API is Andrew Richards?

For a long time now I've had a registry file to make context menu entries for WinDbg. The entries allow you to select the x86 or x64 debugger. Internally at Microsoft, I have another version of the registry file that contains two more context menu entries...

Implementing ICorDebugManagedCallback2 isn't too hard, it just takes a lot of boiler-plate code to make ICorDebug happy. So as to make this easier for anyone who would like to implement ICorDebugManagedCallback2, attached is the template code to start...

Today I wanted to find out what the Debugger Engine (DbgEng) changes are between Windows 7 and the Windows 8 Developer Preview. To get the differences, I did a WinDiff between the SDK 7.1 ‘DbgEng.h’ header file and the new version (C:\Program...

For some unfathomable reason, there seems to be no simple chart cross referencing the common CPU names, their basic features, and the internal CPU information identification (provided by !cpuid and !sysinfo cpuinfo ).  (There is also no clear description...

I've written a three part series in MSDN Magazine that covers the Debugging API (specifically, DbgEng). Writing a Debugging Tools for Windows Extension - Part 1 - March 2011 Covers the build environment and the basics of Output, reading Memory...

These David Solomon talks on Memory Management (circa 2005) used to be on TechNet Spotlight but got pulled last year. I've found a repost of them here: http://www.opsvault.com/david-solomon-technet-talks/

ProcDump v3.04 has been released . The release just contains a tiny (edge case) sanity check I wrote in the MiniPlus stack traversal code. Specifically, it caters for the case where esp/rsp is not within the stack base and stack limit. In this highly...

To save a symbol lookup in a debugger extension, here are the hardcodes to use for StackBase and StackLimit. User Mode 32bit 0:000> dt nt!_TEB.Stack* ntdll!_TEB +0x000 NtTib : +0x004 StackBase : Ptr Void +0x008 StackLimit : Ptr Void...

One of my debugger extensions commands uses IDebugDataSpaces2::QueryVirtual to iterate through the target’s address space to find particular size allocations (regions that are used for the TEB if you must know).  The code was working fine but on...

A Traditional Linked List At some point in every developer’s life, you’ll have to write some code that works with a Linked List. You’ll start by making a structure like this: typedef struct { ULONG64 ulStartAddress; ULONG64 ulEndAddress;...

My blog post on a BugCheck 0x101 - CLOCK_WATCHDOG_TIMEOUT is now live on the NTDebugging blog... http://blogs.msdn.com/b/ntdebugging/archive/2011/10/26/debugging-a-clock-watchdog-timeout-bugcheck.aspx

To cut a long story short, if you install SQL Server 2008 R2 via ISO mount in Virtual PC, the install will fail with a Database Engine Handle error. To get out of this issue: Uninstall everything to do with SQL Server (from Programs and Features...

Just posted an article on the NTDebugging blog about ICorDebugUnmanagedCallback::DebugEvent ">ICorDebugUnmanagedCallback::DebugEvent . http://blogs.msdn.com/b/ntdebugging/archive/2011/11/29/fixing-an-icordebugunmanagedcallback-induced-hang.aspx

My 4th MSDN Magazine article is now available online: Writing a Plug-in for Sysinternals ProcDump v4.0 http://msdn.microsoft.com/en-us/magazine/hh580738.aspx

I was the substitute co-host of Channel 9 "The Defrag Show" on the 11th April 2012. Larry Larsen asked me to step in for Gov while he is on leave. Covered lots of goodies, especially some useful keyboard shortcuts. Enjoy! http://channel9.msdn.com...

I again was the substitute co-host of Channel 9 "The Defrag Show" for the 18th April 2012 show. http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-CMD-Line-Wifi-Autologin-Method-Bugcheck-Troubleshooting

I again was the substitute co-host of Channel 9 "The Defrag Show" for the 25th April 2012 show. Gov is back next week. http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Memory-Management-Phishing-Inside-Microsoft

I again was the substitute co-host of Channel 9 "The Defrag Show" for the 2nd August 2012 show. Gov is back next week. http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Delayed-Loading-on-Startup-Cant-Boot-From-USB-Defrag-Tools

Andrew Richards and Larry Larsen host this deep dive into the tools used on the tech support show Defrag and walk you through how to use many Windows diagnostic tools found on SysInternals. http://channel9.msdn.com/Shows/Defrag-Tools

http://channel9.msdn.com/Events/Ch9Live/Channel-9-Live-at-BUILD-2012/Defrag-Tools-Live-14